An absolute http(s) URL, checked on the RAW value: new URL() silently trims
surrounding whitespace and drops tab/CR/LF, but the engine appends request
paths to the raw string, so a padded value would request /%20/... or reach a
custom transport unparsed. Userinfo is allowed, but a "%" in it must start a
valid escape (%25 for a literal one); it is redacted from the reasons.
An absolute http(s) URL, checked on the RAW value: new URL() silently trims surrounding whitespace and drops tab/CR/LF, but the engine appends request paths to the raw string, so a padded value would request
/%20/...or reach a custom transport unparsed. Userinfo is allowed, but a "%" in it must start a valid escape (%25for a literal one); it is redacted from the reasons.